Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Roseonlinecms Subscribe
Filtered by product Roseonlinecms
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-1636 1 Roseonlinecms 1 Roseonlinecms 2017-10-10 7.5 HIGH N/A
Directory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the op parameter, as demonstrated by injecting PHP code into Apache log files via the URL and User-Agent HTTP header.
CVE-2009-4581 1 Roseonlinecms 1 Roseonlinecms 2017-08-16 6.8 MEDIUM N/A
Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the admin parameter.